CVE-2013-7448

Description

Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get.

References

https://github.com/yarolig/didiwiki/commit/5e5c796617e1712905dc5462b94bd5e6c08d15ea

https://github.com/OpenedHand/didiwiki/pull/1/files

http://www.openwall.com/lists/oss-security/2016/02/19/7

http://www.openwall.com/lists/oss-security/2016/02/19/6

http://www.openwall.com/lists/oss-security/2016/02/19/5

http://www.openwall.com/lists/oss-security/2016/02/19/4

http://www.debian.org/security/2016/dsa-3485

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3